CVE-2008-3260: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Claroline before 1.8.10 allow remote attackers to inject arbitrary web script or HTML via 1 the cwd parameter in a rqMkHtml action to document/rqmkhtml.php, or the query string to 2 announcements/announcements.php, 3 calendar/agenda.php, 4...